hailin
/
rwadurian
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix(auth-service): 补全 ResetPasswordDto/ChangePasswordDto 的验证装饰器 

ValidationPipe 的 forbidNonWhitelisted 因缺少 class-validator 装饰器
将重置密码请求全部拒绝（400 Bad Request），导致找回密码流程无法完成。

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
hailin 2026-03-10 20:45:52 -07:00
parent 424b7fe9d0
commit d16cd9bc66
1 changed files with 18 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
backend/services/auth-service/src/api/controllers/password.controller.ts
View File

@ -7,6 +7,7 @@ import {
UseGuards, UseGuards,
} from '@nestjs/common'; } from '@nestjs/common';
import { ThrottlerGuard } from '@nestjs/throttler'; import { ThrottlerGuard } from '@nestjs/throttler';
import { IsString, IsNotEmpty, Matches, MinLength } from 'class-validator';
import { PasswordService } from '@/application/services'; import { PasswordService } from '@/application/services';
import { JwtAuthGuard } from '@/shared/guards/jwt-auth.guard'; import { JwtAuthGuard } from '@/shared/guards/jwt-auth.guard';
import { CapabilityGuard } from '@/shared/guards/capability.guard'; import { CapabilityGuard } from '@/shared/guards/capability.guard';
@ -14,13 +15,30 @@ import { CurrentUser } from '@/shared/decorators/current-user.decorator';
import { RequireCapability } from '@/shared/decorators/require-capability.decorator'; import { RequireCapability } from '@/shared/decorators/require-capability.decorator';
class ResetPasswordDto { class ResetPasswordDto {
@IsString()
@IsNotEmpty()
@Matches(/^1[3-9]\d{9}$/, { message: '手机号格式不正确' })
phone: string; phone: string;
@IsString()
@IsNotEmpty()
@Matches(/^\d{6}$/, { message: '验证码格式不正确' })
smsCode: string; smsCode: string;
@IsString()
@IsNotEmpty()
@MinLength(6, { message: '密码至少6位' })
newPassword: string; newPassword: string;
} }
class ChangePasswordDto { class ChangePasswordDto {
@IsString()
@IsNotEmpty()
oldPassword: string; oldPassword: string;
@IsString()
@IsNotEmpty()
@MinLength(6, { message: '密码至少6位' })
newPassword: string; newPassword: string;
} }